Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by aura77 through our website at https://aura77.cam, mobile applications, customer support channels, and any other digital touchpoints where you interact with our services. This policy governs how we collect, use, disclose, transfer, store, and protect your personal data in compliance with applicable data protection laws and international privacy standards.

aura77 operates as an international online gaming platform serving Indonesian players aged 21 and above. We recognize the importance of privacy in the digital age and have implemented comprehensive safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our commitment to privacy is reflected in our technical infrastructure, operational procedures, and staff training programs.

By creating an account on aura77, depositing funds, placing bets, or otherwise using our services, you consent to the collection and processing of your personal data as described in this Privacy Policy. If you do not agree with our data practices, you should discontinue use of our services immediately. For players under 21 years of age, access to and use of aura77 services is strictly prohibited.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account with aura77, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name as it appears on your government-issued identification, date of birth, gender, nationality, and photograph for KYC verification purposes.
• Contact Information: Residential address (including street, city, province, postal code), email address, mobile phone number, and WhatsApp contact details for communication and account recovery.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account information), payment card details if applicable, and transaction history.
• Identification Documents: Scanned copies or photographs of government-issued ID (KTP, passport, or driver's license), proof of address documents (utility bills, bank statements dated within three months), and payment method verification documents.
• Account Credentials: Username, password (stored in encrypted form only), security questions and answers, and two-factor authentication settings.
• Communication Records: Content of your communications with our customer support team via live chat, email, WhatsApp, or in-app messaging, including transcripts, attachments, and metadata.

2.2 Information Collected Automatically

When you access and use aura77 services, we automatically collect certain technical and usage data:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID), and mobile network operator.
• Connection Data: IP address, geographic location (country, city, region based on IP), internet service provider, connection type (WiFi, cellular), and connection timestamps.
• Usage Data: Pages visited, features accessed, games played, bets placed, time spent on platform, navigation paths, clicks, scrolls, and interaction patterns with website elements.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, pixel tags, web beacons, and similar technologies that help us recognize you, remember your preferences, analyze traffic, and improve platform functionality.
• Transaction Data: Deposit amounts, deposit methods, withdrawal requests, withdrawal destinations, bonus claims, wagering activity, win/loss records, and balance history.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Verification of payment method ownership, transaction status confirmations, fraud detection indicators, and payment provider risk assessments.
• Identity Verification Services: Results of automated identity checks, document authenticity verification, sanctions screening, politically exposed person (PEP) checks, and adverse media screening.
• Game Providers: Aggregated gameplay data, game session duration, bet patterns, and game performance metrics necessary for platform analytics and fraud prevention.
• Credit Reference Agencies: In jurisdictions where permitted, credit history data to assess financial standing and prevent fraud.

3. How We Use Your Information

3.1 Account Management and Service Delivery

We use your personal information primarily to provide, maintain, and improve aura77 services:

• Creating and managing your gaming account with secure authentication.
• Processing deposits to your account balance via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Processing withdrawal requests and transferring funds to your verified payment methods in Indonesian Rupiah (IDR).
• Enabling gameplay across our casino, live dealer, sports betting, and lottery-style games including togel offerings.
• Calculating and crediting bonuses, free bets, cashback, and other promotional rewards to your account.
• Providing customer support through live chat, email, WhatsApp, and in-app messaging in both English and Bahasa Indonesia.
• Sending transactional communications including account confirmations, deposit receipts, withdrawal notifications, bonus credits, and password reset instructions.

3.2 Legal and Regulatory Compliance

aura77 operates in a heavily regulated industry and uses your information to comply with legal obligations:

• Verifying your identity and age to ensure compliance with the 21+ age requirement for Indonesian players.
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by international gaming regulations and financial crime prevention laws.
• Screening against sanctions lists, politically exposed persons (PEP) databases, and adverse media to prevent financial crime.
• Maintaining records of your account activity, transactions, and communications as required by gaming licenses and regulatory authorities.
• Responding to lawful requests from law enforcement, regulatory bodies, courts, and government agencies.
• Investigating and reporting suspicious activity including potential money laundering, fraud, match-fixing, or other illegal activities.

3.3 Security and Fraud Prevention

Protecting you and other players from fraud and abuse is a critical use of your information:

• Monitoring account activity for signs of unauthorized access, account takeover, or credential compromise.
• Detecting fraudulent deposits, bonus abuse, multi-accounting, collusion, and other terms violations.
• Implementing risk-based authentication and additional verification steps for high-value transactions or unusual activity patterns.
• Analyzing betting patterns to identify match-fixing, insider trading, or other integrity threats in sports betting.
• Blocking access from known VPN services, proxy servers, and IP addresses associated with fraud or restricted jurisdictions.

3.4 Marketing and Promotional Communications

With your consent, we use your contact information to send marketing communications:

• Promotional emails about new games, special offers, bonus opportunities, and platform updates.
• SMS or WhatsApp messages with time-sensitive promotions, exclusive bonuses, and important account notifications.
• Personalized offers based on your gaming preferences, deposit history, and activity patterns.
• Newsletters featuring gaming tips, strategy guides, sports betting previews, and responsible gaming reminders.

You can opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account notification settings, or contacting customer support. Note that even if you opt out of marketing, we will still send essential transactional and account-related communications.

3.5 Platform Improvement and Analytics

We analyze usage data to understand how players interact with aura77 and identify opportunities for improvement:

• Analyzing page load times, error rates, and performance metrics to optimize platform speed and reliability.
• Studying navigation patterns to improve user interface design and simplify common workflows like deposits and game selection.
• Evaluating which games, betting markets, and features are most popular to inform content strategy and game provider partnerships.
• Conducting A/B testing of new features, layouts, and promotional offers to determine what resonates best with Indonesian players.
• Generating aggregated, anonymized reports on platform usage, player demographics, and market trends for business intelligence purposes.

4. Information Sharing and Disclosure

4.1 Service Providers and Business Partners

We share your personal information with carefully selected third-party service providers who assist us in delivering aura77 services:

• Payment Processors: Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Danamon, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive necessary financial information to process your deposits and withdrawals.
• Game Providers: Leading software suppliers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe receive your user ID, bet data, and game session information to deliver gaming content and calculate outcomes.
• Identity Verification Services: Specialized KYC/AML providers verify your identity documents, check sanctions lists, and confirm document authenticity on our behalf.
• Cloud Hosting and IT Infrastructure: Secure server hosting providers store and process your data using industry-standard encryption and access controls.
• Customer Support Tools: Live chat platforms, email services, and ticketing systems enable our support team to assist you efficiently while maintaining conversation history.
• Analytics and Marketing Services: With your consent, analytics platforms help us understand user behavior, and email marketing tools deliver promotional communications.

All third-party service providers are contractually obligated to protect your data, use it only for the specified purposes, and maintain confidentiality in accordance with applicable data protection laws.

4.2 Legal Requirements and Protection of Rights

We may disclose your personal information when required by law or when necessary to protect our rights and those of other players:

• Complying with court orders, subpoenas, search warrants, or other lawful requests from law enforcement and regulatory authorities.
• Responding to formal investigations by gaming regulators, financial crime authorities, or other government agencies with jurisdiction over our operations.
• Enforcing our Terms & Conditions, including investigating suspected breaches, fraud, or abuse.
• Protecting the safety, security, and integrity of aura77, our staff, and our players against threats, legal claims, or harmful activities.
• Preventing or investigating potential crimes including money laundering, terrorist financing, fraud, or other illegal activities.

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate restructuring involving aura77, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and prominent website notice before your information is transferred and becomes subject to a different privacy policy.

4.4 What We Don't Share

aura77 does not and will never:

• Sell your personal information to data brokers, marketing companies, or any third party for profit.
• Rent or lease your contact information to advertisers or other businesses.
• Share your gambling activity, win/loss records, or betting patterns with third parties except as required by law or necessary for service delivery.
• Disclose your account balance, deposit amounts, or financial information to anyone other than you and authorized service providers.

5. Data Security Measures

5.1 Technical Safeguards

aura77 implements robust technical security measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers uses 256-bit SSL/TLS encryption. Sensitive data at rest including passwords and payment information is encrypted using AES-256 encryption standards.
• Secure Authentication: Passwords are hashed using bcrypt or similar strong one-way hashing algorithms and never stored in plain text. Optional two-factor authentication (2FA) provides an additional security layer.
• Firewall Protection: Multi-layered firewall systems protect our infrastructure from unauthorized access, DDoS attacks, and other network-based threats.
• Intrusion Detection: 24/7 monitoring systems detect and alert us to suspicious activity, unauthorized access attempts, or potential security breaches in real-time.
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments on our systems quarterly.
• Secure Coding Practices: Our development team follows OWASP security guidelines and conducts code reviews to identify and fix vulnerabilities before deployment.

5.2 Organizational Safeguards

Beyond technology, we implement strict organizational controls:

• Access Controls: Personal data is accessible only to authorized personnel who require it to perform their job functions, using role-based access control (RBAC) systems.
• Staff Training: All employees undergo mandatory data protection training covering confidentiality obligations, security best practices, and incident response procedures.
• Confidentiality Agreements: Every employee, contractor, and service provider signs legally binding non-disclosure agreements (NDAs) before accessing any personal data.
• Incident Response Plan: We maintain a documented data breach response plan that defines detection procedures, containment measures, notification requirements, and remediation steps.
• Vendor Due Diligence: All third-party service providers undergo security assessments before engagement and are contractually required to maintain equivalent security standards.

5.3 Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, aura77 will:

• Investigate the breach immediately to determine its scope, cause, and affected data.
• Take prompt action to contain the breach, secure systems, and prevent further unauthorized access.
• Notify affected players via email within 72 hours of discovering the breach, detailing what information was compromised and what steps we are taking.
• Report the breach to relevant regulatory authorities as required by applicable data protection laws.
• Offer appropriate remediation measures such as credit monitoring services, password resets, or account security enhancements.
• Conduct a post-incident review to identify root causes and implement preventive measures to avoid recurrence.

6. Your Privacy Rights

6.1 Right to Access

You have the right to request a copy of all personal information we hold about you. To exercise this right, contact our support team at [email protected] with a subject line "Data Access Request." We will provide a comprehensive report of your personal data within 30 days, subject to identity verification.

6.2 Right to Correction

If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to have it corrected. You can update most information directly through your account settings or by contacting customer support. For changes to critical identity information, we may require supporting documentation.

6.3 Right to Deletion

You may request deletion of your personal data by closing your account and requesting erasure. Please note that we are legally required to retain certain information for regulatory compliance, fraud prevention, and dispute resolution purposes. Retained data will be securely archived with restricted access and deleted after the legal retention period expires (typically 5-7 years from account closure).

6.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (CSV or JSON) and to transmit that data to another service provider. Contact our support team to request a data export, which will be provided within 30 days.

6.5 Right to Object and Restrict Processing

You may object to certain types of data processing including direct marketing, profiling, and automated decision-making. You can opt out of marketing communications via account settings, unsubscribe links, or by contacting support. Note that objecting to essential processing (KYC verification, fraud prevention, legal compliance) may prevent us from providing services to you.

6.6 Right to Withdraw Consent

Where we process your data based on consent (such as marketing communications or optional analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.

7. International Data Transfers

As an international online gaming platform, aura77 may transfer and process your personal information on servers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place including standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms. All international data transfers comply with applicable data protection laws and maintain security standards equivalent to those described in this policy.

8. Data Retention

We retain your personal information for as long as your account remains active and for a period thereafter as required by law or legitimate business needs:

Data Category	Retention Period
Account registration information	Duration of account + 7 years after closure
Identity verification documents	Duration of account + 7 years after closure
Transaction records	Duration of account + 7 years after closure
Betting and gaming activity	Duration of account + 5 years after closure
Customer support communications	Duration of account + 3 years after closure
Marketing consent records	Duration of consent + 3 years after withdrawal
Website usage data and analytics	24-36 months from collection

After the applicable retention period, personal data is securely deleted using industry-standard data destruction methods including cryptographic erasure for encrypted data and multi-pass overwriting for unencrypted data.

9. Cookies and Tracking Technologies

aura77 uses cookies, pixel tags, and similar technologies to enhance your experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits and remember your preferences. We use both first-party cookies (set by aura77) and third-party cookies (set by our service providers). You can control cookie settings through your browser preferences, though disabling cookies may limit certain platform functionality. For detailed information on the cookies we use and how to manage them, please refer to our Cookie Policy accessible from the website footer.

10. Children's Privacy

aura77 services are strictly intended for adults aged 21 and above. We do not knowingly collect, process, or maintain personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from a minor, we will delete it immediately and terminate the associated account. Parents or guardians who believe their child has provided information to aura77 should contact us immediately at [email protected] so we can take appropriate action.

11. Changes to This Privacy Policy

aura77 reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by email to your registered address and display a prominent notice on our website at least 14 days before the changes take effect. The "Last Updated" date at the top of this policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of aura77 services after policy changes constitute acceptance of the updated terms.

12. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected] (use subject line "Privacy Inquiry")
• Live Chat: Available 24/7 through your account dashboard
• WhatsApp: +62 812 3456 7890 (08:00-23:00 WIB daily)

We aim to respond to all privacy-related inquiries within 48 hours and resolve data subject rights requests within 30 days. For complex requests, we may extend this period by an additional 30 days with notification.